[tool] chore(tooling): improve and sync renovate & gh actions

Author: guillaumejparis

.github/workflows/oaev_shared_auto_label.yml

@@ -0,0 +1,14 @@
+name: "[OAEV Shared] Auto Label"
+on:
+  pull_request:
+    branches: [main, release/current]
+    types: [opened, reopened]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  auto-label:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Auto Label"
+        uses: FiligranHQ/filigran-ci-tools/actions/auto-label@v1

.github/workflows/oaev_shared_check_signed_commit.yml

@@ -0,0 +1,13 @@
+name: "[OAEV Shared] Check Signed Commits in PR"
+on:
+  pull_request_target:
+    branches: [main, release/current]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  check-signed-commits:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check signed commits in PR
+        uses: FiligranHQ/filigran-ci-tools/actions/check-signed-commit@v1

.github/workflows/oaev_shared_validate_pr_title.yml

@@ -0,0 +1,20 @@
+name: "[OAEV Shared] Validate PR title Worker"
+on:
+  pull_request:
+    branches: [main, release/current]
+    types: [opened, edited, reopened, ready_for_review, synchronize]
+jobs:
+  validate-pr-title:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Generate a token"
+        id: generate-token
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        uses: actions/create-github-app-token@v2
+        with:
+          app-id: ${{ secrets.OPENAEV_PR_CHECKS_APP_ID }}
+          private-key: ${{ secrets.OPENAEV_PR_CHECKS_PRIVATE_KEY }}
+      - name: "Validate PR title and create check"
+        uses: FiligranHQ/filigran-ci-tools/actions/pr-title-check@v1
+        with:
+          token: ${{ steps.generate-token.outputs.token }}

renovate.json

@@ -7,41 +7,16 @@
     "dependencies",
     "filigran team"
   ],
-  "prConcurrentLimit": 2,
-  "baseBranchPatterns": [
-    "release/current",
-    "main"
+  "minimumReleaseAge": "3 days",
+  "prHourlyLimit": 2,
+  "prConcurrentLimit": 20,
+  "timezone": "Europe/Paris",
+  "schedule": [
+    "* 0-4,22-23 * * 1-5",
+    "* * * * 0,6"
   ],
-  "packageRules": [
-    {
-      "matchUpdateTypes": [
-        "minor"
-      ],
-      "prPriority": 5
-    },
-    {
-      "matchBaseBranches": [
-        "release/current"
-      ],
-      "commitMessageSuffix": null
-    },
-    {
-      "matchJsonata": [
-        "$exists(isVulnerabilityAlert)"
-      ],
-      "matchBaseBranches": [
-        "release/current"
-      ],
-      "enabled": false
-    },
-    {
-      "matchJsonata": [
-        "$not($exists(isVulnerabilityAlert))"
-      ],
-      "matchBaseBranches": [
-        "main"
-      ],
-      "enabled": false
-    }
-  ]
-}
+  "updateNotScheduled": false,
+  "rebaseWhen": "conflicted",
+  "commitMessageAction": "update",
+  "commitMessagePrefix": "[client-python] chore(deps):"
+}